Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7057DC58C6CD11EF94655BBD762E951A.roa
File: 7057DC58C6CD11EF94655BBD762E951A.roa (raw, json)
Hash identifier: 23cmgPB7H7Gjfa3UuXUVUqQeOOjsTc5bVxzP5CrIh98=
Subject key identifier: 3A:8F:D4:BC:15:9E:4B:BF:00:F7:6B:15:5F:E3:06:F1:85:FB:FC:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F283
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7057DC58C6CD11EF94655BBD762E951A.roa
Signing time: Mon 30 Dec 2024 16:45:13 +0000
ROA not before: Mon 30 Dec 2024 16:45:09 +0000
ROA not after: Sun 02 Feb 2025 16:45:09 +0000
asID: 398823
IP address blocks: 45.205.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62083 (0xf283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 30 16:45:09 2024 GMT
Not After : Feb 2 16:45:09 2025 GMT
Subject: CN=6772ce19-8eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a1:ea:98:56:07:df:fa:68:83:26:49:29:26:
43:7c:c6:a1:4b:59:f3:8b:05:5f:33:ed:f5:00:63:
45:62:c0:b1:36:d5:21:cd:73:41:9c:50:9c:ee:b4:
0e:25:d4:9c:d4:d2:ca:51:2d:6c:73:a3:6f:1d:18:
4a:10:59:85:f3:06:d2:70:18:14:a2:9f:e0:b4:58:
58:9a:c5:49:f6:40:9c:83:9c:f7:a6:5c:f7:97:00:
fe:62:15:74:ca:79:5f:03:11:f5:f2:6e:80:51:f5:
6c:36:50:d4:69:3f:c5:4b:ff:f0:ca:3d:4b:47:28:
97:dd:66:9e:20:9c:c8:c7:7f:e9:45:e8:ab:28:6b:
48:43:42:dd:e5:8c:b9:41:2d:33:a7:ff:28:af:8c:
3f:55:b6:c5:ec:ad:71:84:4e:e9:4d:aa:c8:0f:a2:
77:50:7b:c9:b5:8b:ee:0e:33:65:7e:72:d8:bd:70:
7a:fa:a2:6a:b6:bb:3a:72:6c:ed:69:83:37:01:3e:
86:c4:f0:b1:91:0b:2d:89:0f:97:2d:4f:cc:5a:e0:
c7:43:75:ca:81:65:90:65:fc:d4:4e:65:ab:2d:68:
d6:f8:5a:1f:4c:35:9f:ea:29:c2:ad:ce:a4:2d:eb:
5f:d4:95:d2:a9:24:d3:39:47:45:f6:d3:a1:ce:ec:
eb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8F:D4:BC:15:9E:4B:BF:00:F7:6B:15:5F:E3:06:F1:85:FB:FC:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7057DC58C6CD11EF94655BBD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.240.0/20
Signature Algorithm: sha256WithRSAEncryption
75:2f:8c:1d:c3:8b:38:f4:d4:06:ae:a9:65:11:00:1b:07:fb:
ef:43:4a:9e:15:de:7d:45:bd:96:1d:cd:80:b3:43:4b:a8:35:
70:bb:c4:63:65:46:6e:77:45:a7:02:6e:8e:55:f9:a7:4b:42:
c9:30:5d:f1:d3:d2:20:1a:2d:4a:e5:f6:ee:4b:00:cf:65:cb:
ee:45:9d:ae:f2:dd:aa:28:33:83:d0:86:31:2d:c6:55:08:95:
71:80:19:ac:29:5a:7e:5f:87:3d:6b:21:07:e0:98:a8:ee:c6:
1d:7b:4a:2c:63:92:94:06:0c:d2:f1:7c:1c:9a:4f:65:70:32:
77:19:e4:d8:5e:bc:4b:9e:16:7c:ab:49:22:1b:ee:0d:7b:b9:
f3:3e:39:0e:2a:38:9c:12:d4:d6:3e:4f:5e:b1:ba:14:47:d8:
37:09:47:32:f7:22:73:2e:89:a0:b1:db:01:10:1c:ee:65:9a:
8f:ab:7d:13:da:32:e1:26:85:84:80:67:b6:12:bf:9f:b9:ba:
5d:04:ea:d1:73:ea:5d:05:74:96:be:54:20:3b:45:b9:7f:1c:
e6:4e:70:d7:13:1d:93:98:d8:fe:24:7d:65:cc:e5:1d:c4:b9:
d8:76:01:c1:09:f3:5a:5a:3e:c6:79:93:be:62:19:e8:14:7f:
a1:ef:2d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:58:13 2025 by rpki-client